ABSTRACT OF THE DISCLOSURE 

A method and apparatus for verifying configuration changes for network devices using 
digital signatures are disclosed. In one approach, a method comprises the computer- 
implemented steps of receiving trust information defining one or more trusted signatories; 
receiving configuration information comprising a hostname, one or more configuration 
directives for a host associated with the hostname, and one or more digital signatures of the 
hostname and configuration directives; attempting to verify the one or more digital signatures 
based on the trust information; and applying the configuration directives to a network 
element only when the one or more digital signatures are verified successfully. 
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